61 matches found
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
Awesome Web Security 🐶 Curated list of Web Security materials and resources. Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage of...
CVE-2019-18885
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfsverifydevextents NULL pointer dereference via a crafted btrfs image because fsdevices-devices is mishandled within finddevice, aka CID-09ba3bc9dd15...
Craft CMS 2.6 - Cross-Site Scripting/Unrestricted File Upload
Technical Details & Description: ================================ The security risk of the xss vulnerability is estimated as medium with a common vulnerability scoring system count of 3.6. Exploitation of the persistent xss web vulnerability requires a limited editor user account with low...
Revived Wire Media PHP File Manager Username Backdoor
An attacker might use a backdoor which exists in PHP File Manager's user database. A successful exploitation might allow the attacker to create an administrator user on vulnerable installations or to run arbitrary code...
Persian Car CMS 1.0 SQL Injection
| Title : PersianCarCMS-v.1.0 Sql Injection Vulnerability | Author : indoushka | email : [email protected] | Dork : قدرت گرفته از : Persian CAR CMS | Tested on: windows 8.1 Français V.Pro | Download : http://dl.20script.ir/script/cms/PersianCarCMS-v.1.0%5Bwww.20script.ir%5D.zip...
Eclipse.org SQL Injection
Vulnerability: Eclipse.org Error Based SQL Injection Authors: Shahmeer Amir And Rafay Baloch Company: RHA INFOSEC Website: http://services.rafayhackingarticles.net Url...
Cyclope Employee Surveillance Solution < 6.2.1 SQLi Vulnerability - Active Check
Cyclope Employee Surveillance Solution is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Apache Struts < 2.3.3 Showcase Multiple Persistent XSS Vulnerabilities
Apache Struts Showcase is prone to multiple persistent cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
StrawBerry 1.1.1 - Local File Inclusion / Remote Command Execution
?php / StrawBerry 1.1.1 LFI / Remote Command Execution Exploit Site: http://strawberry.goodgirl.ru/ magicquotesgpc = Off Author: AVT Date : 10.05.09 My Site: http://antichat.ru/ / settimelimit0; errorreporting0; list$cli,$host,$path = $argv; if $argc != 3 print...
Sun Java System Identity Manager 6.07.07.1 - idmlogin.jsp Multiple Cross-Site Scripting Vulnerabilities
Sun Java System Identity Manager 6.07.07.1 - idmlogin.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site...
Eskolar CMS 0.9.0.0 - Blind SQL Injection
================================================================================================== !/usr/bin/perl use IO::Socket; ==================================================================================================...
Invision Power Board <= 2.0.3 Login.PHP SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= Invision Power Board agent"Mosiac 1.0" . $ua-agent; if !$ARGV0 $ARGV0 = ''; if !$ARGV3 $ARGV3 = ''; my $path = $ARGV0 . '/index.php?act=Login&CODE=autologin'; my $user = $ARGV1;...
Macromedia ColdFusion MX 6.1 - Template Handling Privilege Escalation
source: https://www.securityfocus.com/bid/11316/info Reportedly Macromedia ColdFusion MX is affected by privilege escalation vulnerability when handling templates. This issue is due to an access validation error that allows a user to perform actions with administrator privileges. An attacker may...
ISS Security Brief: McAfee ePolicy Orchestrator Remote Compromise Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief May 10, 2004 McAfee ePolicy Orchestrator Remote Compromise Vulnerability Synopsis: ISS X-Force has discovered a vulnerability in the McAfee ePolicy Orchestrator software. ePolicy Orchestrator ePO enables the enterprise...
CVE-2003-1327
...
DebPloit (exploit)
DebPloit allows Everyone to get handle to Any process or thread. Handles have enough access to promote everyone to system/admin in the case Target is running under LocalSystem, Administrator account. Works on: Any MS Windows NT 4.0, Windows 2000 SPs before Mar-12-2002. Former NTs weren't tested...
